I plan to pass the GPEN exam really soon. I would really appreciate if you give me some comprehensive advices. I've heard that real exam a harder than practice ones. These are my concerns:- what are the most complicate/hard questions? Could you give same example?- how many types of question could be? by example: command line parameters, screen-shot utility guess, theoretical concepts, etc- do they give any Law content questions?- what else should I worry?

If the GPEN is like the three GIAC exams I've taken, the practice exams are very much like the actual exam. I don't think I've ever seen the same question on both, but the questions are very comparable to the practice exams. Take whatever you made on the practice exams (if you took them as if they're the real test) and add about 5 points. That will likely be your final score. I find that I focus better when its FOR REAL.

By the way, I doubt anyone here will give you examples of actual questions as you sign a non-disclosure agreement as part of the exam.

kagyu wrote:The test is cake if you took the SANS class. My suggestion would be to improve the index in each book to allow you to find things easier if you want to double-check before you answer the questions.

If you didn't take the SANS class and are challenging the test, that may be more challenging.

I totally agree with kagyu. If you have taken the class and you have the books the test isn't hard to pass. You have plenty of time to look stuff up, so do it. They aren't breaking any new ground here, so look in the books.

Metahuman wrote:I apologize for replying to this old thread, but I'm planning to take the Challenge mode for GPEN. Though I managed to find an older version of GPEN notes, I could not find the latest ones.

I understand that my license to use SANS electronic course materials is exclusively for my individual professional development. I will not transfer nor will I allow others to use the course materials or the test questions. I will not use any part of this material for teaching others nor will I incorporate it, nor allow it to be incorporated, in any other training materials or publications, electronic or print, without prior specific written consent of the SANS Institute."

I took the SEC560 course last week and I plan to pass the GPEN exam within the next 45 days. I haven't started indexing my books but plan to start this weekend. I'm new to Linux and the tools covered in the course so I've been trying to watch every video I can find to supplement my learning. Thanks for all your posts as it is encouraging and provide a wealth of information. Hopefully, I'll be able to contribute soon.